2681 matches found
CVE-2016-9407
Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs...
CVE-2016-9409
CV E-2016-9409 is an XSS vulnerability in the admin control panel of MyBB (and MyBB Merge System) before version 1.8.7. The flaw allows remote attackers to inject arbitrary web script or HTML via vectors involving pruning logs. It affects MyBB prior to 1.8.7, with impact limited to client-side sc...
CVE-2016-9408: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Mod control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users...
PT-2017-10124
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.7 MyBB Merge System versions prior to 1.8.7 Description A cross-site scripting XSS issue exists in the Mod control panel, potentially allowing remote attackers to inject arbitrary web script or HTML through editing...
CVE-2015-8974: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB aka MyBulletinBoard before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2017-10123
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.7 MyBB Merge System versions prior to 1.8.7 Description A cross-site scripting XSS issue might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs. Recommendatio...
PT-2017-10127
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.7 MyBB Merge System versions prior to 1.8.7 Description The issue allows remote attackers to obtain the installation path by sending mails, specifically targeting the Admin control panel. Recommendations For MyBB...
CVE-2016-9407: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs...
CVE-2016-9421: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Users module in the Admin control panel in MyBB aka MyBulletinBoard before 1.8.8 and MyBB Merge System before 1.8.8 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-9419: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Admin control panel in MyBB aka MyBulletinBoard before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-10137
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.8 MyBB Merge System versions prior to 1.8.8 Description A cross-site scripting XSS issue exists in the Users module of the Admin control panel, potentially allowing remote attackers to inject arbitrary web script or...
PT-2017-10135
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.8 MyBB Merge System versions prior to 1.8.8 Description A cross-site scripting XSS issue exists in the Admin control panel, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For MyBB...
PT-2017-10125
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.7 MyBB Merge System versions prior to 1.8.7 Description A cross-site scripting XSS issue exists in the Admin control panel, potentially allowing remote attackers to inject arbitrary web script or HTML. This is possib...
CVE-2016-9413: Improper Access Control
The Admin control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
PT-2017-10122
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.7 MyBB Merge System versions prior to 1.8.7 Description A cross-site scripting XSS issue exists in the User control panel, potentially allowing remote attackers to inject arbitrary web script or HTML. Recommendations...
CVE-2016-9406: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the User control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-9409: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Admin control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving pruning logs...
CVE-2014-8362
Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...
